I'm not sure, whether Windows is to blame for this, but how the hell is it possible, that I got a spam message (caught by Gmail), that contained a link to a website, which contained my password (as in password.somethingaboutyogurts.com), which in turn I started using on a few websites (Microsuck, diplomacie.valka.cz, and then just my Jabber account, I think) and this computer just a few days ago? The second website being a Diplomacy game community, in Czech, that I've been a member of for the last three years.
I'd love to blame Windows, but since I use Firefox and OOo and Exodus or Gush for everything I do, it just doesn't seem to fit in...